df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9.bin
Size 175KB
Sample251114-sazjaaskf1
SHA256 df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9
MD5 df1e348372d344568c4505dca7846e77
SHA1 e0b4f55bb7fb8c0948b86511ce48ffdaac06bf71
SHA512 bd924bbce90f1a2d4588960121ca1b74a7616d291ded5b8cf1a28e8a7c93358b3b9dc552c79b89d85bf76ebcb1200d91028bafacfce65058fd921f3e3b80d077
SSDEEP 3072:ayPqTcNkM2jt3MuZOjr6GtDp5BSzFOrPJxFc60cRAp:aTcNkTt5OfZpv8QcBkAp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9.bin

File Explorer

df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9.bin

.exe 175KB

df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9.bin

IMPHASH 870fd781a201608756e20d4a156a48da
SHA256 df138c96b45614d5224eb00d3051ac7078fa12cf3e26dd86d9469f687c133dd9
MD5 df1e348372d344568c4505dca7846e77
SHA1 e0b4f55bb7fb8c0948b86511ce48ffdaac06bf71
SHA512 bd924bbce90f1a2d4588960121ca1b74a7616d291ded5b8cf1a28e8a7c93358b3b9dc552c79b89d85bf76ebcb1200d91028bafacfce65058fd921f3e3b80d077
SSDEEP 3072:ayPqTcNkM2jt3MuZOjr6GtDp5BSzFOrPJxFc60cRAp:aTcNkTt5OfZpv8QcBkAp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32021

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetConsoleWindow SetConsoleCursorPosition AllocConsole GetLogicalDrives FindFirstFileW GetFileSizeEx FindFirstVolumeW FindNextFileW GetFinalPathNameByHandleW WaitForMultipleObjects SetThreadPriority GetQueuedCompletionStatus lstrlenA FindClose PostQueuedCompletionStatus SetFileAttributesW GetCurrentThread GetSystemInfo LoadLibraryW CreateThread ExitProcess GetStdHandle LocalFree MoveFileExW FindVolumeClose GetCurrentProcessId SetThreadExecutionState GetVolumePathNamesForVolumeNameW FindNextVolumeW CreateIoCompletionPort GetDriveTypeW HeapCreate HeapFree HeapSize HeapAlloc GetProcessHeap GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc LCMapStringW CompareStringW GetProcAddress WriteConsoleW ScrollConsoleScreenBufferW GetNativeSystemInfo GetLastError Sleep OpenProcess ReleaseMutex WaitForSingleObject CreateMutexW SetProcessShutdownParameters SetVolumeMountPointW TerminateProcess GetCurrentProcess GetCommandLineW SetPriorityClass GetConsoleScreenBufferInfo ReadFile DeleteCriticalSection GetLocalTime CloseHandle lstrcatW CreateFileW SetFilePointer InitializeCriticalSection LeaveCriticalSection GetModuleFileNameW WriteFile EnterCriticalSection lstrcmpiW lstrcpyW lstrlenW SetFilePointerEx GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetFileType GetCommandLineA GetModuleHandleExW RaiseException EncodePointer QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW DecodePointer

user32

ShowWindow wsprintfA wsprintfW

advapi32

AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW FreeSid LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

shell32

SHGetFolderPathW SHEmptyRecycleBinW ShellExecuteW CommandLineToArgvW

ole32

CoCreateInstance CoSetProxyBlanket CoInitialize CoUninitialize

oleaut32

VariantClear SysAllocString VariantInit

rstrtmgr

RmGetList RmRegisterResources RmStartSession RmEndSession

shlwapi

PathRemoveFileSpecW StrStrIW PathFindExtensionW